ipad-wall-displays-ansible/initial-setup.yml

- name: ipad setup
  hosts: ipads
  gather_facts: no
  tasks:
    - name: Get ssh password from password-store
      set_fact:
        ansible_ssh_pass: "{{ lookup('passwordstore', 'servers/cms/mobile@ipads') | d(omit) }}"
    - name: Get ssh pub key
      set_fact:
        authorized_keys: "{{ lookup('file', '~/.ssh/id_rsa.pub') }}"
    - name: Write .ssh/authorized_keys
      raw: mkdir -p ~/.ssh && echo "{{ authorized_keys }}" > ~/.ssh/authorized_keys
    - name: Allow Pubkey Authentication for OpenSSH
      become: true
      raw: >-
        sed -i /etc/ssh/sshd_config
        -e 's|^#\?PubkeyAuthentication\W.*|PubkeyAuthentication yes|'
        -e 's|^#\?AuthorizedKeysFile\W.*|AuthorizedKeysFile %h/.ssh/authorized_keys|'
        -e 's|^#\?PermitRootLogin\W.*|PermitRootLogin no|'
    - name: Fix /var/mobile permissions
      raw: chmod 750 /var/mobile
    - name: restart sshd
      become: true
      raw: launchctl stop system/com.openssh.sshd; launchctl start system/com.openssh.sshd
      ignore_errors: yes
    - name: copy python 2.7 deb
      local_action: command scp -r ./python_2.7.6-3_iphoneos-arm.deb "{{ inventory_hostname }}:"
    - name: install python 2.7
      become: true
      raw: dpkg -i python_2.7.6-3_iphoneos-arm.deb && rm python_2.7.6-3_iphoneos-arm.deb; apt-get install -f -y